General

  • Target

    ee00484b12bb163e0ae3dadb2f6f62b41fd9b3048e23ba9a1b5c6c6d0666b23a

  • Size

    899KB

  • Sample

    240829-splwqszgnn

  • MD5

    c19e7bd2aa20b711a2f82e01dd2e21d3

  • SHA1

    48852bbc1ab127478d6479ae917087907642a774

  • SHA256

    ee00484b12bb163e0ae3dadb2f6f62b41fd9b3048e23ba9a1b5c6c6d0666b23a

  • SHA512

    af36e56c39aefca9ba085a731a78a9f744903be366406241e3d4c053a3396a84ba41a1ae1bda4c7f738d74e580215df2dcaaaa722bf0276ac8aa93d839b5586c

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXy:7wqd87Vy

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ee00484b12bb163e0ae3dadb2f6f62b41fd9b3048e23ba9a1b5c6c6d0666b23a

    • Size

      899KB

    • MD5

      c19e7bd2aa20b711a2f82e01dd2e21d3

    • SHA1

      48852bbc1ab127478d6479ae917087907642a774

    • SHA256

      ee00484b12bb163e0ae3dadb2f6f62b41fd9b3048e23ba9a1b5c6c6d0666b23a

    • SHA512

      af36e56c39aefca9ba085a731a78a9f744903be366406241e3d4c053a3396a84ba41a1ae1bda4c7f738d74e580215df2dcaaaa722bf0276ac8aa93d839b5586c

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXy:7wqd87Vy

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks